Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/3137302e3235342e3230302e302f32322d3234203d3e20323635313330.roa
File:                     3137302e3235342e3230302e302f32322d3234203d3e20323635313330.roa (raw, json)
Hash identifier:          wMHEfEeRjTvd4EqlCZd/dtK8rXUJN8B9EO0p23zBF4k=
Subject key identifier:   2C:9C:6E:A1:FB:BA:97:87:2B:14:68:6D:7A:73:88:F0:D7:11:52:3D
Certificate issuer:       /CN=B4F02299A2EDE5BDF53F6DECAC529C29F6E92881
Certificate serial:       69F9069290FBA43B76C5855661052414B45BB958
Authority key identifier: B4:F0:22:99:A2:ED:E5:BD:F5:3F:6D:EC:AC:52:9C:29:F6:E9:28:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/3137302e3235342e3230302e302f32322d3234203d3e20323635313330.roa
Signing time:             Thu 06 Mar 2025 05:51:52 +0000
ROA not before:           Thu 06 Mar 2025 05:46:52 +0000
ROA not after:            Thu 05 Mar 2026 05:51:52 +0000
asID:                     265130
IP address blocks:        170.254.200.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f9:06:92:90:fb:a4:3b:76:c5:85:56:61:05:24:14:b4:5b:b9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4F02299A2EDE5BDF53F6DECAC529C29F6E92881
        Validity
            Not Before: Mar  6 05:46:52 2025 GMT
            Not After : Mar  5 05:51:52 2026 GMT
        Subject: CN=2C9C6EA1FBBA97872B14686D7A7388F0D711523D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:de:28:d3:45:ff:f3:12:cf:7b:5e:9e:4d:4b:
                    ac:24:b9:5c:ea:c7:aa:c3:db:66:ab:d4:1b:4a:fe:
                    de:cb:b6:67:69:31:6a:db:aa:fe:94:40:df:11:03:
                    0a:10:ad:ae:45:59:0f:e8:79:50:00:ca:ac:e0:87:
                    89:fa:c3:7e:fd:e2:6a:71:12:ef:df:81:88:df:7d:
                    fa:a2:76:e4:64:e3:71:df:31:ea:f7:f4:a7:75:87:
                    b6:2a:d2:5b:19:af:94:ac:a6:ba:61:42:18:0a:a6:
                    f2:22:82:0a:9a:ba:68:6e:5c:cf:b5:9d:04:5a:81:
                    77:e8:90:65:94:1e:df:a4:bc:be:4e:00:12:9f:a5:
                    9b:0a:2c:f3:e7:48:ef:bb:91:7f:03:1e:bc:53:f8:
                    95:ce:90:39:4c:ac:56:cc:f1:58:f6:c0:67:bd:da:
                    07:0c:74:8c:f6:61:3d:fb:65:ec:49:7b:c8:a8:66:
                    54:2a:c4:8e:2d:90:fa:41:88:64:ed:b0:56:cc:9e:
                    05:0f:85:33:57:86:63:14:da:0d:65:98:7f:23:70:
                    98:89:fd:3d:8f:98:7a:af:8b:3e:6a:ec:6f:69:1f:
                    48:2f:61:e0:22:d7:5b:13:f7:97:d9:03:54:92:e3:
                    7f:2b:ed:d0:bc:23:ba:c6:e9:88:d9:08:2a:28:60:
                    2f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9C:6E:A1:FB:BA:97:87:2B:14:68:6D:7A:73:88:F0:D7:11:52:3D
            X509v3 Authority Key Identifier:
                keyid:B4:F0:22:99:A2:ED:E5:BD:F5:3F:6D:EC:AC:52:9C:29:F6:E9:28:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/3137302e3235342e3230302e302f32322d3234203d3e20323635313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:f7:e6:1f:a4:43:1c:71:fe:fa:52:e7:6a:99:e4:a7:be:b2:
         9b:da:40:6c:cc:ac:6c:ba:c5:04:74:0e:e9:c9:c2:b9:c7:73:
         e9:59:ea:59:91:78:9e:47:ea:89:87:70:75:d4:1a:5e:76:eb:
         44:dd:a3:26:7a:3f:28:8f:0a:12:45:89:a7:73:6f:24:e3:ca:
         7d:df:65:3a:8e:a8:a0:9f:c9:22:ee:b0:e2:9b:3e:d5:bc:56:
         af:7f:11:4c:0f:cf:4d:26:74:d5:c3:67:06:6d:17:da:37:66:
         0b:55:8a:2e:ae:39:eb:06:81:43:7d:d3:41:dd:e3:c4:04:cc:
         12:ee:0f:22:a8:85:7f:82:b4:51:ad:28:42:3f:8d:39:b4:6a:
         d0:ba:13:ce:08:cb:77:65:cd:36:21:c0:bb:fc:64:46:5d:ac:
         8a:e1:eb:57:d3:82:72:02:35:e6:f8:5c:a1:d0:6d:c9:74:68:
         ad:c1:b8:e1:82:b4:e8:0f:b5:cc:7e:20:e4:eb:fe:b3:60:3a:
         78:ad:91:97:38:3b:e2:05:78:42:42:66:b7:62:c1:af:df:9a:
         5d:81:c1:60:7f:82:ee:95:ea:30:e1:d8:20:ac:af:7f:88:18:
         02:2b:8d:21:35:4f:74:e4:ca:97:80:09:30:bf:72:f6:8f:ab:
         62:72:71:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:00:55 2025 by rpki-client